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Title: 

PROTOCOL CONVERSION USING A VIRTUAL DISTRIBUTED NODE 

5 

FIELD OF THE INVENTION 

The present invention relates an arrangement, and a method, in a 
packet data communication system of connecting an end user local 
3 network and a packet data communication network. Particularly the 
invention relates to a network structure in a packer data 
communication system. The invention further relates to a packet 
data communication system including such arrangement (s ) or. a 
packet data communication system with a network structure for 
15 interconnecting local networks and a packet data communication 
network. 

STATE OF THE ART 

Cellular communication systems which, in addition to support 
20 communication of speech and a circuit switched data, also support 
communication of packet data are receiving more and more attention 
and several such systems are known: The GSM (Global Sysiem for 
Mobile Communication) system supports communication of packet data 
through the General Packet Radio Service (GPRS) . Also the PDC- 
25 system (Personal Digital Communications) provides for packet data 
communication support through the PPDC (Packet PDC) . Another such 
packet data communication service which is intended for the AMPS 
system is CDPD. 

30 The GPRS of GSM uses a packet mode technique both for transfer of 
data and signalling and GPRS radio channels are defined which can 
be flexibly allocated. Time slots in a TDMA (Time Division 
Multiple Access) frame are shared by the users that are active and 
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uplink and downlink are allocated separately. In GPRS as well as 
in other packet data communication supporting systems nodes are 
introduced for the management of packet data communication and in 
the present application such nodes are called packet data nodes. 
5 In GPRS the packet data node is called the serving GPRS support 
node (SGSN) which is at the same hierarchical level as an ordinary 
MSC (Mobile Switching Center) and it keeps track of the locations 
of individual mobile subscriber stations, performs security 
functions and access control. The SGSN is connected to the base 
10 station system (BSS) with frame relay. Another node is also 
provided in GPRS, the so called gateway GSN (GGSN) which provides 
for interworking with external packet switched networks and it is 
connected with SGSN via an IP-based GPRS backbone network. 

15 For interconnecting a packet data communication network and for 
example a local area network of an end user expensive and 
complicated solutions are needed. Particularly specific routing 
equipment the only purpose of which is to connect an end user LAN 
with a packet data supporting network such as GPRS is needed. Such 

20 a router has to be supplied either by the end user himself or, as 
is mostly the case, by the GPRS operator. This is an expensive 
solution for the operator and furthermore it does not provide for 
any efficient scalability. According to the known solution a 
router is supplied for example by the operator and there has to be 

25 a link to the user from the GPRS system on which a tunnel protocol 
must run in order to enable the use of end user private IP 
addressing towards a mobile station. If Internet access is wanted, 
there has to be a link from GPRS to an Internet Service Provider 
and another router from Internet towards the end user 

30 communicating with a further router as referred to above providing 
a link to Internet from the end user. From SGSN and to GGSN, as 
defined above, there is a physical link via the GPRS backbone and 
a GTP (GPRS tunnelling protocol e.g. described in GSM 09.60 Vers. 



'BNSDOCID: <WO 004836 5A1 J _> 



WO 00/48365 



PCT/SEOO/00198 



3. 

5.0.0, Draft TS 100, 960 Vers. 5.0.0 (1998-01) by ETSI (European 
Telecommunications Standard Institute) ) link is used from SGSN to 
GGSN. The solution is centralised and it requires extra tunnelling 
to the LAN of the end users, thus a tunnel runs from a GGSN io a 

* 

tunnel device, the tunnel end point of which has to be reachable 
through use of public IP addressing or by use of GPRS operator 
supplied addressing. This is a requirement since otherwise the 
tunnel end point can not be reached from the GGSN. If routing is 
provided through. Internet, encryption requirements may be imposed. 
The tunnel ends with a tunnel end point device which may be end 
user ' supplied or operator supplied and it runs an unspecified 
tunnel protocol which may include encryption. This is managed by 
the end user in turn communicating with the end user equipment 
which in turn communicates with the mobile station. 

The known centralised solution is even more disadvantageous if the 
end users use .private IP addressing schemes. In addition to the 
high costs of equipment for the operator, a lot of physical space 
is needed which in turn also is expensive and unpractical, for the 
operator. Still further, since the equipment is centralised, the 
impact will be very large in case of functional disturbances. It 
is also a drawback that the operator is dependent on routing 
equipment which involves high costs. 

SUMMARY OF THE INVENTION 

What is needed is therefore an arrangement for interconnecting an 
end user local network and a packet data communication network 
which facilitates the provision of "interconnection for the 
operator and through which a simple and cheap solution can be 
provided for the operator. Still further an arrangement is needed 
which enables a high degree of scalability of the system. Still 
further an arrangement is needed which does not require the 
operator to buy and pay for expensive and space demanding 
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equipment which often only can be used for the particular 
dedicated purposes. Still further an arrangement is needed which 
removes the drawbacks of the hitherto known solutions which are 
centralised leading to severe impacts in the case of functional 
disturbances etc. Particularly an arrangement is needed through 
which the buying of dedicated equipment can be avoided to a high 
degree for the operator- An arrangement is also needed through 
which the structure is simplified also when end users use private 
IP addressing schemes. 

Particularly an arrangement is needed through which the costs for 
the total system can be reduced and which enables a simple 
solution solving end user IP address overlapping in case IP 
addressing schemes are used. Particularly an arrangement is needed 
through which the costs can be reduced for the operator and in 
practice also for the customers since they will pay for what they 
actually use. 

A cellular communication system supporting packet data 
communication having a network structure allowing an 
interconnection of the packet data network and end user networks 
fulfilling the aims as discussed above is also needed. 

Still further a method of interconnecting a packet data 
communication network and an end user local network fulfilling the 
above discussed objects is also needed. 

Therefore an arrangement for interconnecting an end user local 
network and a packet data communication network comprising a 
packet data network backbone, is provided, at least comprising one 
packet data node with a serving functionality for handling packet 
data communication, the arrangement further including a gateway 
functionality for providing communication with external networks. 
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It comprises at least one virtual distributed node which provides 
the gateway functionality. The virtual distributed node comprises 
an interworking node device including converting means for 
converting between a communication protocol for local network end 
user communication which uses a user level data packet format and 
an internal packet data protocol using an internal packet data 
format. The virtual distributed node includes a management 
functionality for managing the interworking node device. This 
management functionality is executed in, or localized to, a packet 
data node with a serving functionality and the packet data network 
is, .used for communication. Thus the gateway functionality is moved 
to the interworking node device which generally is provided by the 
user and the management thereof is provided through the serving 
packet data node. The management functionality particularly 
comprises a management system which executes in a serving packet 
data node. The management functionality . can be provided and 
executed in a number of serving packet data nodes and a plurality 
of serving packet data nodes may also be able to manage a 
plurality of interworking node devices for reasons of redundancy. 
In a most advantageous embodiment the virtual distributed node/ 
nodes is/are managed by the operator of the packet data 
communication system. The management can of course also be handled 
in other manners, but operator management provides for a 
particularly advantageous implementation . 

A public or third party data communication network, such as for 
example Internet may also be integrated with the packet data 
communication system backbone network as an interconnect or as an 
interconnecting data network. 

According to different embodiments the internal packet data frames 
may be, or require being, encrypted. In that case the interworking 
node device has to convert the internal packet data frames to/from 
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user level packet data frames, thus also handling the encryption. 
Encryption -is particularly needed if a part of the network is a 
public or third party data communication network such as Internet. 
The encrypted frames may' be so called IP-sec-frames. This is 
particularly the case when an end user uses a private I? 
addressing scheme, the external network being Internet. The sarr.e 
is of course applicable in case the public or third party data 
communication network is some other network than Internet or an 
intranet . 



The inventive concept can be implemented for different cellular 
communication systems including a packet data communication J 
supporting functionality such as for example GPRS. In that case 
the packet data node with a serving functionality is the so called 

i 

15 serving GPRS support node SGSN. This node is connected to a base 
station subsys.tem BSS and the internal packet data communication 
protocol that is used is the GTP protocol. The virtual distributed 
node providing" the gateway functionality can thus be said tc 
replace the network gateway node GSN, also called GGSN. According 

20 to the present invention the virtual distributed node including 
the interworking node device, which is managed from a SGSN, thus 
replaces the conventional GGSN, the management of the entire 
system still, in an advantageous implementation, being handled by 
the operator, the interworking node device, however, physically 

25 and financially being taken over by the end user. 

s 

In an alternative embodiment the packet data communication system 
is packet PDC, PPDC, in which case the serving packet, data node is 
a packet-mobile switching center, P-MSC. In still another 
30 implementation the concerned system is the CDPD as discussed 
above. Of course the invention is also applicable to any other 
packet data system using a network structure which is similar to 
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what has been described above, including serving and gateway node 
types, such as for example the GPRS structure. 

The inventive concept can e.g. also be implemented in UMTS 
(Universal Mobile Telephone System) . In an • alternative 
implementation the virtual distributed node or nodes is/are 
managed by the end user. 

Therefore also a cellular communication system supporting packet 
data communication which comprises a number of packet data nodes 
with a serving functionality for handling packet data 
communication, communicating with the base station subsystem, and 
including a gateway functionality for providing communication with 
external data networks is provided. The system also provides for 
communication with end user local networks. The communication 
system comprises a number of virtual distributed nodes providing a 
gateway functionality and comprising an interworking node device 
which includes converting means for converting between a 
communication protocol for local network end user traffic, which 
protocol uses a user level data packet format, and an internal 
packet data protocol using an internal packet format. Each virtual 
distributed node is also provided with a management functionality 
for managing the interworking node device. Said management 
functionality for a number of interworking node devices, i.e. one 
or more, is executed in a number of packet data nodes comprising a 
serving functionality. The packet data network backbone is used 
for communication. According to different embodiments the 
management functionality is provided in a plurality of serving 
packet data nodes for managing at least one interworking node 
device, i.e. a plurality of serving packet data nodes may all be 
able to manage one interworking node device for redundancy reasons 
or one serving packet data node may be able to manage one or more 
interworking node devices or a plurality of interworking node 
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devices as well as one interworking node device either may be 
manageable from one packet data node with a serving functionality 
or by a plurality of packet data nodes with a serving 
functionality. The solution may be the same throughout the system 
5 or different solutions may be implemented over the system, for 
example taking into consideration the redundancy needed at .the 
actual location. 

Advantageously the virtual distributed nodes are managed by the 
10 operator of the cellular communication system supporting packet 
data communication. In a particular implementation a public or 
third party data communication network is integrated with the 
cellular communication system supporting packet data communication 
the backbone network acting as an interconnecting data network. 
15 The public or third party data communication network may for 
example be Internet. Intranets may also be integrated in a similar 
manner. 

In a particular implementation a number of internal packet data 
20 frames provided to a number of interworking node devices for 
conversion are encrypted, e.g. because of an external data 
communication network being connected. The ^interworking node 
device does then convert said internal packet data frames to (and 
from) user level packet data frames for end user communication. 
2 5 Systems implementing the inventive concept may for example be 
GPRS, . PPDC, CDPD, UMTS etc., the main thing, being that the 
structure is such that it needs nodes with a serving functionality 
and a gateway functionality. 

30 A method of interconnecting an end user local network and a packet 
data communication network comprising a packet data network 
backbone is therefore also provided. The packet data communication 
network comprises a number of packet data nodes including a 



BNSDOCID: <WO_0048365A 1 I > 



r 

WO 00/48365 PCT/SE00/00198 

* 

9 

serving functionality and it also includes a gateway functionality 
for external ' communication- The method includes the steps of; 
introducing an interworking node device to provide a gateway 
functionality; executing the management of said interworking node 
5 device in a number of packet data nodes having a serving 
functionality; using an internal data communication protocol for 
communication between a packet data node with N a serving 
functionality and an interworking node device; using a 
communication protocol for communication between the interworking 
node device and the end user of a local network, e.g. a Local Area 
Network (LAN) , in said interworking node device converting between 
the end user communication protocol and the internal data 
communication protocol so that communication between a packet data 
node with a serving functionality and an end user local network 
15 can take place without the use of specific tunnelling protocols 

s. 

and intermediate, centralised, routing means. 

Particularly the method includes the step of managing an 
interworking node device from a plurality of packet data nodes for 

20 reasons of redundancy. Even more particularly the method includes 
the step of managing a plurality of interworking node devices from 
one and the same packet data node with a serving functionality. 
Most particularly the method includes the step of providing for 
managing of the interworking node devices, or the virtual gateway 

25 nodes, by the operator of the packet data communication system. In 
an advantageous implementation the method includes the steps of 
integrating a public or third party data communication network, 
such as for example Internet, or intranets, as interconnecting 
external networks. The method can be implemented in different 

30 packet data, communication systems such as GPRS, PPDC or CDPD etc. 
as referred to above. 
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It is an advantage of the invention thdt a decentralised solution 
is used, thus reducing the consequences of malfunctions etc. It is 
also an advantage of the invention that the equipment can be 
■customized and provided by the customer, on the customer premises 
and also physically located at the end user's desired location and 
still it particularly may be handled or managed by the operator of 
the packet data system. Also a number of other advantages are 
provided for of which a number already have been described earlier 
in the application. 
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BRIEF DESCRIPTION OF THE DRAWINGS 

The invention will in the following be further described in non- 
limiting way and with reference to the accompanying drawings in 
which : 



Fig. 1 ■ shows a prior art network structure which is 

illustrated for explanatory reasons, 

Fig. .2 shows an example of an implementation of the present 
10 invention to a packet data system, 

t 
f 

Fig. 3 is a figure similar to Fig. 2 schematically 

illustrating an implementation to GPRS, and 

15 Fig. 4 shows a particular embodiment of an implementation . . of 

the invention to GPRS. ^ 



DETAILED DESCRIPTION OF THE INVENTION 

For explanatory reasons and in order to explain the functioning 
20 and the advantages of the inventive arrangement a prior art 
network structure which relates to GPRS is illustrated in Fig. 1. 
Two SGSNs 1 0 are connected to base station subsystems, BSS. In the 
figure also a combined SGSN/GGSN, i.e. a node which includes both 
the functionality of a SGSN and the functionality of a GGSN l co is 
25 illustrated. The SGSNs lo communicate with GGSNs 2 0 , 2 0 via 
physical links 12 0 which run via the GPRS backbone. There is also 
a physical link 12 0 to the combined SGSN/GGSN via the GPRS 
backbone. The GGSN nodes 2 0 , 2 0 and the combined SGSN/GGSN include 
the management functionality MA for the payload traffic. To 
30 provide for communication or connection with an end user LAN or a 
traffic end point, which is the end user equipment that 
communicates with the mobile station, (not shown) routing devices 
RO 3 0 are supplied either by the end user or the by the GPRS 
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operator, which generally is the case. There is a link 14 0 to ihe 
end user from the GPRS system. On this link a tunnel protocol has 
to be run in order to enable the use of end user private IP 
addressing towards the mobile station (not shown) . The tunnel or 
the tunnel protocol 15 0 runs from a GGSN 2 0 to a tunnel device or 
a tunnel end point TE 4 0 which has to be reachable through the use 
of public IP addressing or by use of GPRS operator supplied 
addressing. Otherwise the TE 4 0 can not be reached from the GGSN 
2 0 - It can be routed -through Internet. Then however encryption may 
be required. The tunnel end point TE 4 0 is, as referred to above, 
the end point of the tunnel 15 0 and it is an end user (or GPRS 
operator) supplied device that uses an unspecified tunnel protocol 
16 0 (possible with encryption) , which is managed by the end user. 
The traffic end point TRE 7</ is, as referred to above, the ..end 

w 

user equipment communicating with the mobile station. Links 14 1 
are provided from the GGSN 2 0 and the combined SGSN/GGSN l co from 
GPRS to an Internet Service Provider ISP 5 X for Internet access. A 
routing device ROX 6i is provided and it is used from Internet 
towards the end user. 16i indicates the link from the end user to 
Internet over a routing device 3 0 ' . 13 0 illustrates the GTP link 
used from SGSN to GGSN. Thus, for the known solution routing 
devices are required meaning that the operator has to provide for 
a GGSN and a router and it also presupposes a tunnel end point. 

Fig. 2 shows the implementation of the inventive concept to a 
packet data system PDS in general, as long as it includes serving 
and gateway node functionality. 

a 

The inventive concept in general terms consists in the 
introduction of a virtual gateway packet data node which is built 
in a distributed way and which comprises a DGN (an interworking 
node device) 2A and a management system MA executing in a packet 
data node 1A, IB. Fig. 2 shows two packet data nodes PDN 1A, IB 
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communicating with base stations BS using a communication protocol 
11A. Since the communication system in this case also supports 
communication of speech and circuit switched data, it comprises a 
number of mobile switching centers MSC in a conventional manner 
and of which only one is illustrated. According to different 
embodiments payload and management come from different notes, or 
from the same, the management may be implemented in a number of 
nodes to provide for redundancy, various alternatives being 
possible. The DGN may also be network connected. 



In Fig. 2 a mobile station MS is illustrated which is connected to 
a digital terminal equipment DTE. MS communicates via radio link 
with a BS. A communication protocol llAi is also illustrated for 
communication between PDN 1A, IB and an MS ^respectively. 

4 

15 Information of mobile subscriber stations is kept in the 
respective PDN 1A; IB which also provides for multiplexing, 
compression, access control etc. and the communication protocol 
llAi is virtual and "holds" packets together sent, to/from the same 
destination. The interworking node device DGN 2A is capable of 

20 receiving internal communication protocol (ICP) frames and it 
includes converting means for converting said ICP frames sent over 
the ICP link 13A. There are also physical links 12A from PDN 1A, 
IB via the PDS backbone to the DGN 2A. The management system MA 
executing in PDN 1A, IB manage DGN 2A via 18 and as can be seen, 

25 in this embodiment one and the same DGN 2A can be managed both by 
PDN 1A and PDN IB for redundancy reasons. In DGN 2A the ICP frames 
are converted to user level frames of a user level protocol ULC 
communicating over link 16A with the traffic end point (TRE) 7A. 
Thus, in the converting means in DGN 2A the. conversion is 

30 performed between ICP frames and ULC frames and the ULC frames are 
passed on and off the users LAN to the traffic end point TRE 7A. 
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Advantageously DGN 2A is managed by the packet data communication 
operator. Thus, as can be seen from the figure, the internal 
communication protocol ICP can be used on the way to the DGN 2A 
which is, advantageously, provided by, and located with, the 

« 

5 customer, thus requiring no routing device and extra tunnelling. 
If the ICP frames are encrypted, for example so called IP-sec- 
frames, DGN is also able to handle them. Encryption is however 
optional and depends on the particular implementation, whether 
Internet is an interconnect or not etc. 

10 . 

Fig. 3 shows an - embodiment of the invention as implemented to 
GPRS. A packet data node here comprises a serving GPRS support 
node SGSN communicating with the base station controller BSC which 
in turn communicates with a number of base transceiver stations 

15 BTS. The SGSN 1C communicates with the BSC via a communication 
protocol 11B which here for example is the BSS GPRS protocol 
BSSGP. The SGSN is at the same hierarchical level as an MSC (no 
MSC is illustrated in this figure) and it keeps track of the 
locations of individual MSs, performs security functions and 

20 access control. The SGSN 1C is connected to BSS with frame relay. 
SGSN 1C is connected to DGN 2B via the GPRS backbone network and 
an internal communication protocol 13B; 13C is used for 
communication between SGSN 1C and DGN 2B, 2C respectively. The 
internal communication protocol is here advantageously the GTP 

25 protocol. The GTP protocol is described in GSM 09.60, version 
5.0.0, draft TS 100,160 V 5.0.0 (1998-01) by ETSI, (European 
Telecommunication Standards Institute) which herewith is 
incorporated herein by reference. The general packet radio service 
GPRS is further described in GSM 03.60, version 5.2.0 (1997-12), 

30 by ETSI, and it is also incorporated herein by reference. The DGNs 
2B; 2C are managed by the management functionality executing in 
SGSN 1C via communication links 18. It does not have to be 
separate physical links for the management and the payload traffic 
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as illustrated in the figure (cf. e.g. 13C and 18) but one and the 
same physical interface may be used. This is also applicable for 
Fig. 2 and Fig. 4. In this embodiment is illustrated in a 
simplified manner that two DGNs (or more of course) are managed by 
5 one and the same SGSN. However, this does not have to be the case, 
but it shows an advantageous implementation. Also more than two 
DGNs may be managed by one and the same SGSN etc. just as one or 
more of the DGNs may be managed from two or more SGSNs for 
redundancy reasons. In DGN 2B; 2C a conversion is performed 
between GTP frames and user level frames of the user level 
communication protocol ULC 16B to the traffic end points TRE 7B; 
7.C of the end user LANs. Thus, in a particular embodiment DGN 2B; 
2C is capable of receiving GTP frames, which may be encrypted or 
not, and if encrypted, probably so called IP-sec frames, and of 
15 converting the GTP frames to for example IP frames and passing the 
IP frames on and off the end users LAN . Advantageously DGN 2B; 2C 
is managed by the operator of GPRS. 

» 

Fig. 4 again shows an implementation to GPRS. SGSNs ID, IE, IF are 
20 connected to BSS in a conventional manner. SGSN ID, IE, IF all 
include the execution of a management functionality which forms a 
part of a virtual GGSN which also comprises DGNs 2D, 2E and 2F 
respectively. The management of DGNs 2D, 2E and 2F respectively is 
handled via links 18 as more thoroughly described with reference 
25 to Fig. 3. Again the GTP protocol' is used as an internal 
communication protocol 13C, 13D, 13E which is used for the payload 
traffic. As described above, "in DGN 2D and 2E respectively a 
conversion is done to/from the user level communication protocol 
ULC 16D, 16E to the traffic end point TRE of the end user LAN. 

30 

However, in this case a router ROX 6i, which may be supplied 
either by the end user or by the GPRS operator and which is the 
router used to Internet Service Provider ISP 5i which communicates 
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with a router ROX x 6 2 which is a router used from Internet towards 
the end user communicating with the DGN 2F, which in turn provides 
for conversion between the internal communication protocol GTP 13E 
and the user level communication protocol 16F from DGN 2F to 
traffic end point TRE 7E. As can be seen, the end point of the GTP 
tunnel goes all the way to the DGN 2D, 2E and 2F respectively in 
each case wherein the conversion takes place and as can be seen no 
GGSN is required as well as no routing devices are required to be 
provided by the operator and still further no extra tunnelling is 
needed to the end user LAN. Since the DGNs are provided by the end 
user they are particularly adapted to the specific needs and 
requirements of the end user. This also assists in making the 
solution decentralised and, in comparison with hitherto known 
structures, insensitive to faults in that the consequences thereof 
will be much less serious. 

The invention is of course not limited to the explicitly 
illustrated embodiments, but it can be varied in a number of ways 
within the scope of the claims. 
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CLAIMS 

1. An arrangement for interconnecting an end user local network 
and a packet data communication network comprising a packet data 
network. .backbone, at least one packet data node 
(LA, IB; 1C; ID, IE, IF) with a serving functionality for handling 
packet data communication, and further comprising a gateway 
functionality for providing communication with external 
network (s ) , 

c h a r acterized in 

that it comprises at least one virtual distributed node providing 
a gateway functionality and comprising an interworking node device 
(2A; 2B, 2C; 2D, 2E, 2F) comprising converting means for converting 
between a local network end user communication protocol comprising 
a user level data packet format and an internal packet data 
communication protocol using an internal packet data format and in 
that said virtual distributed node includes a management 
functionality for managing the interworking node device 
(2A; 2B, 2C; 2D, 2E, 2F) , which management functionality is executed in 
a packet data node ( 1A, IB; 1C; ID, IE, IF) , and wherein the packet 

+ 

data network backbone is used for communication. 

2. An arrangement according to claim 1, 
characterized in 

that the management functionality (MA) comprises a management 
system executing in a serving packet data node 
(1A,1B;1C;1D,1E,1F) . 

3. An arrangement according to claim 2, 
characterized in 

that the management functionality (MA) is provided and executed in 
a number of serving packet data nodes (1A, IB; 1C; ID, IE, IF) . 
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4. An arrangement according to any one of the preceding claims, 
characterized in 

that a number of serving packet data nodes ( 1A, IB; 1C; ID, IE, IF) 
comprises a management functionality (MA) to manage a plurality of 
interworking node devices (2A; 2B, 2C; 2D, 2E, 2F) . 

5. An arrangement according to any one of the preceding claims, 
characterized in 

that the virtual distributed node(s) is/are managed by the 
operator of the packet data communication system. ■ 

6. An arrangement according to any one of claims 1-4, 
characterized in 

that the virtual distributed node(s) is/are externally managed 
(from the outside of the system) . 

7. An arrangement according to any one of the preceding claims, 
characterized in. 

that a public or third party data communication network such as 
e.g. Internet is integrated with the packet data communication 
system backbone network as an interconnecting data network. 

8. An arrangement according to any one of the preceding claims, 
characterizedin 

that the internal packet data frames of the internal' communication 
protocol are encrypted and in that the interworking node device 
converts said internal packet data frames to/from user level 
packet data frames. 

9. An arrangement according to claim 8, 
characterized in 

that the encrypted frames are IP-sec-frames. 
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10. An arrangement at least according to claim 7, 
characterized in 

that at least a number of end user(s) use(s) an overlapping IP- 
addressing scheme, the external data network being Internet. 

11. An arrangement according to any one of claims 1-4, 
characterized in 

that the distributed node(s) is/are managed by the end user (s) . 

12. An arrangement according to any one of the preceding claims, 
characterized in 

that the packet data communication system is GPRS and in that the 
packet data node is a serving GPRS support node (SGSN) connected a 

* 

base station subsystem (BSS) and in that the internal packet data 
communication protocol is GTP. 

13. An arrangement according to any one of claims 1-11, 
characterized in., 

that the packet data communication system is P-PDC, the serving 
packet data node being a packet-mobile switching center (P-MSC) . 

14. An arrangement according to any one of claims 1-11, 
characterized in 

that the packet data communication system is CDPD or UMTS. 

15. A cellular communication system supporting packet data 
communication and comprising a number of packet data nodes 
(1A, IB; 1C; ID, IE, IF) with a serving functionality for handling 
packet data communication and communicating with a base station 
system and with end user local networks, a gateway functionality 
being provided for the provision of communication with the 
external data network (s), 
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characterized in 

that it comprises a number of virtual distributed nodes each 
providing said gateway functionality and each comprising an 
interworking node device (2A; 2B, 2C; 2D, 2E, 2F) including converting 
means for converting between a communication protocol for local 
network end user traffic which protocol comprises a user level 
data packet format (ULC) and an internal packet data network 
protocol using an internal packet data format (ICP) , and in that 
each virtual distributed node' comprises a management functionality 
for managing the interworking node device (2A; 2B, 2C; 2D, 2E, 2F) , 
which management functionality for a number of interworking node 
devices is executed in a number of packet data nodes providing 
said serving functionality and in that the packet data network 
backbone is used for communication. 

9 

16. A cellular communication system according to claim 15, 
characterized in 

that the management functionality (MA) is provided in a" plurality 
of serving packet data nodes ( 1A, IB; 1C; ID, IE, IF) for managing at 
least one interworking node device (2A; 2B, 2C; 2D, 2E, 2F) . 

c • 

17. A cellular communication system according to claim 15 or 16, 
characterizedin 

that at least one of the serving packet data nodes 
(1A, IB; 1C; ID, IE, IF) comprises a management functionality (MA) 
managing - a plurality of interworking node devices 
(2A;2B,2C;2D,2E,2F) . 

18. A cellular communication system according to any one of claims 
15-17, 

characterized in 
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that the virtual distributed nodes are managed by the operator of 
the cellular communication system supporting packet ■ data 
communication. 

19. A cellular communication system according to any one of claims 
15-18, 

characterized in 

that a public or third party data communication network such as 
Internet is integrated with the cellular communication system 
supporting packet data communication backbone network as an 
interconnecting data network. 

20. A cellular communication system according to any one of claims 
15-18, 

♦ 

characterized in 

that a number of internal packet data frames provided to a number 
of interworking node devices (2A; 2B, 2C; 2D, 2E, 2F) for conversion, 
are encrypted and in that interworking node device (s) convert said 
internal packet data frames to/from user level packet data frames. 

21. A cellular communication system according to any one of claims 
15-20, 

characterized in 

that it is GPRS, PPDC, CDPD or UMTS or a similar communication 
system supporting packet data communication. 

22. A method of interconnecting an end user local network and a 
packet data communication network comprising a packet data network 
backbone and a number of packet data nodes including a serving 
functionality for handling packet data communication and a gateway 
functionality for communication with external networks, 
characterized in 

that it comprises the steps of: 
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- introducing a number of interworking node device (s) 
(2A; 2B, 2C; 2D, 2E, 2F) providing a gateway functionality, r 

- executing the management of said interworking node device (s) 
(2A; 2B, 2C; 2D, 2E, 2F) in a number of packet data nodes 

5 ( 1A, IB; 1C; ID, IE, IF) including a serving functionality, 

- using an internal data communication protocol (ICP;GTP) for 
communication between a packet data node ( 1A, IB; 1C; ID, IE, IF) 
with a serving functionality and an interworking node device 
(2A;2B,2C;2D,2E,2F) , 

10 - using an end user communication protocol (ULC) for communication 
with an end user of a local network, 

- in said interworking node device (2A; 2B, 2C; 2D, 2E, 2F) converting 
between the end user communication protocol (ULC) and the 
internal data communication protocol (ICP;GTP) so that 

15 communication between a packet data node with a serving 

functionality and an end user can take place using the internal 
communication protocol from the packet data node 
(1A, IB; 1C; ID, IE, IF) . to the interworking node device 
(2A;2B,2C;2D,2E,2F) . 

20 

23. A method according to claim 22, 
characterized in 

that it further comprises the step of: 

- managing said interworking node device (s) from a plurality of 
25 packet data nodes ( 1A, IB; 1C; ID, IE, IF) including a serving 

functionality . 

24. A method according to claim 22 or 23", 
characterized in 

30 that it further comprises the step of: 

- managing a plurality of interworking node devices from one and 
the same packet data node, including a serving functionality. 
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25. A method according to any one of claims 22-24, 
characterized in 

that it further comprises the step of: 

- integrating a public or third party data communication network 
such as for example Internet as an interconnecting external 
network. 

26. A method according to any of claims 22-25, 
characterized in 

that it further comprises the step of: 

- managing the interworking node device by the operator of the 
packet data communication system or externally. 

27. A method according to any one claims 22-26, 
ch. aracterizedin 

that the packet data communication system is GPRS, the packet data 
node . with a serving functionality being a SGSN and the 

> 

interworking node device and the management functionality thereof 
is comprised by a virtual gateway GSN, the internal protocol 
further being GTP. 
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